Re: EFS...can it be given to a group or folder ..win2003

From: Drew Cooper [MSFT] (dcoop_at_online.microsoft.com)
Date: 03/05/04 

Date: Fri, 5 Mar 2004 13:18:01 -0800

This is what I mean by rights management:
http://www.microsoft.com/windowsserver2003/technologies/rightsmgmt/default.mspx

A workaround that some people use to do group encryption with EFS is to put
all of the users who will be sharing in the same OU and give them all the RA
certificate/key pair for that OU. That way when any of them encrypts a
file, all of the others can open/modify it. 

-- 
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.
<anonymous@discussions.microsoft.com> wrote in message
news:478701c40251$03cd76e0$a601280a@phx.gbl...
> Thanks for the reply. Can you send me some more detail as
> to what you mean my 'rights management'.
> Are you saying that this can be done through 'Trusted
> Certificates' ?
>
> >-----Original Message-----
> >EFS sharing is for files only.  It doesn't support any
> kind of inheritance.
> >When a file is created in a folder marked for encryption,
> it is encrypted by
> >its creator.
> >
> >If you want groups to share encrypted materials, rights
> management is
> >probably a better Microsoft solution.
> >-- 
> >Drew Cooper [MSFT]
> >This posting is provided "AS IS" with no warranties, and
> confers no rights.
> >
> >
> >"Santanu Mitra" <anonymous@discussions.microsoft.com>
> wrote in message
> >news:721901c4024b$385cb8e0$a001280a@phx.gbl...
> >> I am trying to figure out if there is a way to give
> >> multiple user (through windows domain group OR
> indinidual)
> >> rights to view/modify an encrypted folder.
> >> I have figured out that I can do so on a file level but
> >> not on the folder.
> >> Is there a way through domain policy or whatever ?
> >> Thanks.
> >
> >
> >.
> >

Relevant Pages

  • Re: Storage Feature Pack and LUKS encryption
    ... And what is your windows server question??????????? ... This posting is provided "AS IS" with no warranties, and confers no rights. ... What I'm really curious about is if it will be compatible with LUKS ... IMHO this is also the biggest problem holding back encryption on USB ...
    (microsoft.public.windows.server.general)
  • Re: EFS...can it be given to a group or folder ..win2003
    ... to what you mean my 'rights management'. ... >When a file is created in a folder marked for encryption, ... >> multiple user (through windows domain group OR ...
    (microsoft.public.windows.file_system)
  • Re: EFS...can it be given to a group or folder ..win2003
    ... Here's the EFS whitepaper. ... Directory) and make them all recovery agents for the OU. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... >>A workaround that some people use to do group encryption ...
    (microsoft.public.windows.file_system)
  • Re: EFS confirmation
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... > Its my understanding that if a file is encrypted using efs, ... > encrypted regardless of what NTFS5 partition it is moved/copied to. ... encryption. ...
    (microsoft.public.win2000.security)
  • Re: EFS...can it be given to a group or folder ..win2003
    ... Where do you get the ".pfx" from? ... >Here's the EFS whitepaper. ... confers no rights. ... >> encryption, ...
    (microsoft.public.windows.file_system)